Главная
Study mode:
on
1
Intro
2
Agenda
3
Apple
4
emboss
5
transaction fees
6
Square
7
Chip and Sign
8
Chip and PIN
9
Popular brands
10
Hardware overview
11
Interface overview
12
Internal filesystem
13
Software updates
14
Vulnerability demo
15
Bluetooth
16
Bluetooth over USB
17
Bluetooth over Linux
18
Friendly blue light
19
EMV
20
EMV Buffer Overflow
21
Demonstration
22
Exploit
23
Attack
24
Vendors
25
Conclusion
Description:
Explore the security vulnerabilities of Mobile Point-of-Sale (mPOS) systems in this Black Hat conference talk. Dive into the weaknesses of leading Chip&Pin payment solutions for mobile devices, uncovering a series of exploitable flaws that allow code execution through various input vectors. Learn about the hardware and software components of mPOS devices, including their internal filesystem and update mechanisms. Witness live demonstrations of multiple attack vectors, with a focus on a malicious credit card capable of deploying a remote root shell on embedded mPOS devices. Examine the implications for small businesses and the broader financial technology sector, and gain insights into potential security improvements for these widely-used payment systems.

Mission mPOSsible

Black Hat
Add to list
0:00 / 0:00